CVE-2025-27022

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27022	Third Party Advisory
https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27022	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:nokia:g42_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:nokia:g42:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-07-02 09:15

Updated : 2026-02-11 21:31

NVD link : CVE-2025-27022

Mitre link : CVE-2025-27022

CVE.ORG link : CVE-2025-27022

JSON object : View

Products Affected

nokia

g42_firmware
g42

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2025-27022", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-07-02T09:15:25.290", "references": [{"url": "https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27022", "tags": ["Third Party Advisory"], "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}, {"url": "https://www.cvcn.gov.it/cvcn/cve/CVE-2025-27022", "tags": ["Third Party Advisory"], "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 \nallows remote authenticated users to download all OS files via HTTP \nrequests.\n\n\nDetails: \n\nLack or insufficient validation of user-supplied input allows \nauthenticated users to access all files on the target machine file \nsystem that are readable to the user account used to run the httpd \nservice."}, {"lang": "es", "value": "Una vulnerabilidad de path traversal del endpoint HTTP WebGUI en Infinera G42 versi\u00f3n R6.1.3 permite a usuarios remotos autenticados descargar todos los archivos del sistema operativo mediante solicitudes HTTP. Detalles: La falta o la validaci\u00f3n insuficiente de la entrada del usuario permite a los usuarios autenticados acceder a todos los archivos del sistema de archivos del equipo de destino que son legibles para la cuenta de usuario utilizada para ejecutar el servicio httpd."}], "lastModified": "2026-02-11T21:31:52.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nokia:g42_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EE9ECA9-CB8C-44D6-B221-E1596A69EC40", "versionEndExcluding": "7.1", "versionStartIncluding": "6.1.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nokia:g42:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "631A98C4-038C-40FA-A9AC-0A6155EDB9F5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}